CVE-2026-0622

Open5GS WebUI is affected by CVE-2026-0622: by default it uses hard-coded JWT signing keys (the string change-me) when JWT_SECRET_KEY is unset, allowing an unauthenticated network attacker to forge JWTs and gain access to protected WebUI endpoints (notably under /api/db/*). The issue arises from ...

CVE-2026-0622

creationtimestamp| type| source ---|---|--- 2026-01-20 17:50:04+00:00| seen| https://gist.github.com/Darkcrai86/da7c9ced33722b1fb5a01b77acfbe4f5 2026-01-22 05:06:55+00:00| seen| https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcyg33c7z224...